CVE-2016-6605

HIGH

Cloudera CDH 5.2.0-5.7.2 and 5.8.0 - Improper Access Control in Impala

Title source: llm

Impala in CDH 5.2.0 through 5.7.2 and 5.8.0 allows remote attackers to bypass Setry authorization.

Core 1

Core References

Various Sources x_refsource_confirm

CVSS v3 7.5

EPSS 0.0136

EPSS Percentile 68.3%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE

CWE-284

Status published

Products (43)

cloudera/cdh 5.2.0

cloudera/cdh 5.2.1

cloudera/cdh 5.2.2

cloudera/cdh 5.2.3

cloudera/cdh 5.2.4

cloudera/cdh 5.2.5

cloudera/cdh 5.2.6

cloudera/cdh 5.3.0

cloudera/cdh 5.3.1

cloudera/cdh 5.3.2

... and 33 more

Published Apr 10, 2017

Tracked Since Feb 18, 2026